Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/oN43Af3b5AUnZssPm_n6hLFi2tU.roa
File: oN43Af3b5AUnZssPm_n6hLFi2tU.roa (raw, json)
Hash identifier: ksuYYn56dP6i2MLGJOyfU6TSEiG7UEw5Pb7P8oWoHfM=
Subject key identifier: A0:DE:37:01:FD:DB:E4:05:27:66:CB:0F:9B:F9:FA:84:B1:62:DA:D5
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 019883CD05731573604598EA0597803C9B5D
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/oN43Af3b5AUnZssPm_n6hLFi2tU.roa
Signing time: Thu 07 Aug 2025 09:11:48 +0000
ROA not before: Thu 07 Aug 2025 09:11:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47541
IP address blocks: 91.231.132.0/24 maxlen: 24
185.131.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:cd:05:73:15:73:60:45:98:ea:05:97:80:3c:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Aug 7 09:11:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0de3701fddbe4052766cb0f9bf9fa84b162dad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:fc:40:9e:93:fa:fc:13:87:8e:74:de:13:
ac:60:a1:50:db:3e:60:4f:b7:f3:37:44:f4:2d:d5:
d6:cd:01:b8:ab:f3:d1:83:1e:57:48:fe:44:74:9e:
74:97:2f:aa:43:bf:18:1e:95:9c:ec:07:df:75:2f:
ca:b0:90:f1:5f:d4:67:d8:97:f1:f8:35:b8:ba:29:
7c:33:cf:62:e0:ba:5d:cd:d9:2c:ce:0e:f9:ed:6f:
90:c0:00:68:f1:56:4d:62:3c:fa:c2:3b:82:2a:83:
5c:4c:17:2d:38:5f:e8:91:d1:e5:a4:e2:ff:d2:75:
65:f2:ca:34:9f:0d:1f:84:a3:e7:3c:14:56:bf:08:
f5:70:0a:eb:36:e8:be:89:86:72:b1:42:b8:41:5b:
ae:bf:90:ec:cf:ff:40:34:9d:92:3e:92:ad:52:6e:
42:68:ca:70:66:3c:eb:6a:4d:4b:e4:2b:45:18:df:
bf:e0:6a:a1:7a:9e:26:d1:6e:fc:d0:76:b6:4f:29:
b4:4a:4a:b7:3d:53:51:97:93:a8:f9:cc:e4:d8:5c:
79:9d:51:54:7c:8a:d5:f8:71:4d:f1:79:7e:4b:6a:
b9:54:50:67:4e:64:91:20:fe:e5:2f:d4:8c:7e:60:
ce:91:5e:39:f7:4a:f1:82:04:c6:f7:34:05:9c:e6:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DE:37:01:FD:DB:E4:05:27:66:CB:0F:9B:F9:FA:84:B1:62:DA:D5
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/oN43Af3b5AUnZssPm_n6hLFi2tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.132.0/24
185.131.68.0/23
Signature Algorithm: sha256WithRSAEncryption
74:a0:ca:6f:87:77:fc:b5:fe:7b:d6:44:76:04:a8:cd:ae:b8:
5a:05:b9:3b:de:17:78:1d:ad:1d:73:3a:f9:fd:11:7a:07:2e:
82:1f:28:fe:07:d9:68:5a:73:9f:79:77:f0:4f:24:dd:ca:2c:
17:67:79:a5:c5:ff:9c:da:72:9d:d3:1f:ba:f3:12:67:c9:e0:
c7:3e:f2:92:8d:54:ae:dd:10:7b:68:b0:94:f3:96:76:b6:cc:
48:44:3e:11:26:cc:55:15:9b:26:e7:0c:d1:fa:19:c8:cb:35:
c0:52:f4:ac:7b:74:4f:b5:80:6c:eb:4f:e3:98:d9:bd:03:67:
54:5e:3b:03:27:94:c7:76:62:98:2e:fc:cf:e4:ef:2b:ee:bd:
a8:12:b1:dd:41:28:39:6b:8c:5d:f3:c0:6c:ff:77:c9:6d:c6:
82:9a:91:d1:09:de:5a:79:2c:06:d1:bd:67:0f:b8:25:97:cf:
7d:50:2a:1e:f6:40:ac:a9:c0:3a:c0:7b:14:ed:36:c2:18:89:
a1:a6:6c:d0:f8:de:3d:ff:c1:c0:01:ab:3c:43:79:ca:d1:b7:
f2:89:82:5e:d6:6e:f8:d8:bb:ef:70:06:df:5b:0a:7e:37:51:
71:68:41:83:0b:a6:13:49:cb:00:8a:ad:23:8c:f3:4b:64:a9:
60:51:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:23:07 2025 by rpki-client